# MinIO AIStor EDGE.2026-06-24T15-55-29Z

Released: 2026-06-24

This EDGE build adds a built-in capacity-forecasting API for proactive
capacity planning, tag-based IAM access control for Iceberg tables, and
server-side protection of live table metadata against client modification.
It also completes the console migration to shadcn/ui (new-york-v4 on
Tailwind v4), introduces per-bucket inventory retention, and ships storage,
replication, and rebalance correctness fixes along with a faster path for
single-key unsorted listings.

---

## Downloads

### Binary Downloads

| Platform | Architecture | Download                                                                 |
| -------- | ------------ | ------------------------------------------------------------------------ |
| Linux    | amd64        | [minio](https://dl.min.io/aistor/minio/edge/linux-amd64/minio)           |
| Linux    | arm64        | [minio](https://dl.min.io/aistor/minio/edge/linux-arm64/minio)           |
| macOS    | arm64        | [minio](https://dl.min.io/aistor/minio/edge/darwin-arm64/minio)          |
| macOS    | amd64        | [minio](https://dl.min.io/aistor/minio/edge/darwin-amd64/minio)          |
| Windows  | amd64        | [minio.exe](https://dl.min.io/aistor/minio/edge/windows-amd64/minio.exe) |

### FIPS Binaries

| Platform | Architecture | Download                                                                 |
| -------- | ------------ | ------------------------------------------------------------------------ |
| Linux    | amd64        | [minio.fips](https://dl.min.io/aistor/minio/edge/linux-amd64/minio.fips) |
| Linux    | arm64        | [minio.fips](https://dl.min.io/aistor/minio/edge/linux-arm64/minio.fips) |

### Package Downloads

| Format | Architecture | Download                                                                                                                         |
| ------ | ------------ | -------------------------------------------------------------------------------------------------------------------------------- |
| DEB    | amd64        | [minio_20260624155529.0.0_amd64.deb](https://dl.min.io/aistor/minio/edge/linux-amd64/minio_20260624155529.0.0_amd64.deb)         |
| DEB    | arm64        | [minio_20260624155529.0.0_arm64.deb](https://dl.min.io/aistor/minio/edge/linux-arm64/minio_20260624155529.0.0_arm64.deb)         |
| RPM    | amd64        | [minio-20260624155529.0.0-1.x86_64.rpm](https://dl.min.io/aistor/minio/edge/linux-amd64/minio-20260624155529.0.0-1.x86_64.rpm)   |
| RPM    | arm64        | [minio-20260624155529.0.0-1.aarch64.rpm](https://dl.min.io/aistor/minio/edge/linux-arm64/minio-20260624155529.0.0-1.aarch64.rpm) |

### Container Images

```bash
# Standard
docker pull quay.io/minio/aistor/minio:EDGE.2026-06-24T15-55-29Z
podman pull quay.io/minio/aistor/minio:EDGE.2026-06-24T15-55-29Z

# FIPS
docker pull quay.io/minio/aistor/minio:EDGE.2026-06-24T15-55-29Z.fips
podman pull quay.io/minio/aistor/minio:EDGE.2026-06-24T15-55-29Z.fips
```

Note: Homebrew is only available for RELEASE builds, not EDGE builds.

---

## Security Updates

- Added rate limiting to the Delta Sharing OAuth token endpoint, protecting
  it from credential-guessing and request-flooding abuse (#5959).
- Server-side protection now prevents S3 clients from directly modifying or
  deleting the live `metadata.json` of an Iceberg table, so catalog state can
  only change through sanctioned table operations (#4391).
- Applied an explicit 10 MiB request-body limit uniformly across the
  unauthenticated STS handlers (AssumeRoleWithSSO/WebIdentity/ClientGrants,
  LDAPIdentity, Certificate, CustomToken), closing the connection on overflow
  and hardening these entry points against oversized requests (#5943).

---

## New Features

### Capacity Forecasting

- Added a built-in capacity-forecast capability that records cluster capacity
  history and exposes a forecast through a new admin API, enabling proactive
  capacity planning without external tooling (#4082).

### Iceberg Tables

- **Tag-based access control**: table and namespace tags are now integrated
  into IAM access control, so policies can grant or restrict table operations
  based on tags for finer-grained authorization (#5687).

### System Inventory

- Inventory retention is now configurable per bucket rather than only as a
  single global setting, allowing different retention windows for different
  workloads (#5699).

---

## Performance Improvements

- Single-key unsorted listings (`?unsorted=true` with `max-keys=1`) are now
  short-circuited into a direct STAT, avoiding a full listing walk for existence
  checks (#5958).
- Reworked `xl.meta` drive caching to stay coherent after metadata changes and
  made prefix deletes scale linearly with the number of entries, reducing
  overhead on large prefix operations (#5960).

---

## Bug Fixes

### Storage & Rebalance

- Fixed a goroutine leak in rebalance by lazily starting the Coordinator
  notifier, preventing accumulation of leaked goroutines over time (#5968).
- Reduced healing log noise by removing a non-actionable "undecided object
  state" message that fired during normal healing (27c10c6).

### Replication

- Source-deleted versions are no longer counted as replication errors,
  preventing misleading replication failure metrics (#5899).

### Tables

- Fixed table count showing zero after a catalog reset and restored missing
  view-only namespace statistics (#4979).
- Preserved the `X-Forwarded-For` header on the inter-node tables statistics
  proxy so client source addresses are reported correctly (#5994).

### System Inventory

- Warehouse bucket deletions now purge associated inventory entries, so
  inventory orphans are reclaimed instead of accumulating (#5993).
- Completed leftover-cleanup handling during system-inventory bootstrap to
  reclaim stale inventory artifacts (#5527).

### Console

- Completed UI cleanup following the shadcn/ui upgrade, resolving layout and
  component regressions across affected pages (#5991).
- Pinned the datetime calendar to a fixed six-week layout so the time controls
  no longer shift between months (#5949).
- Filtered warehouse and empty buckets out of the object-distribution chart so
  it reflects only relevant buckets (#5952).

---

## Improvements

- Completed the console migration to the shadcn/ui new-york-v4 component set on
  Tailwind v4, unifying styling and component primitives across the UI (#5905).
- Added a commit-ID tooltip on the version display for easier identification of
  the exact running build (#5910).

---

## Security & Compliance

### Software Bill of Materials (SBOM)

This release includes comprehensive SBOM documentation in multiple formats:

- [SPDX JSON](sbom-EDGE.2026-06-24T15-55-29Z.spdx.json) - Standard SBOM format
- [CycloneDX JSON](sbom-EDGE.2026-06-24T15-55-29Z.cyclonedx.json) - Security scanner compatible
- [Go Modules](go-modules-EDGE.2026-06-24T15-55-29Z.txt) - Human-readable dependency list

SBOM files document all direct and transitive dependencies for security auditing and compliance requirements.

---

## Upgrade Instructions

For detailed upgrade instructions, please read: https://docs.min.io/enterprise/aistor-object-store/upgrade-aistor-server/

Platform-specific upgrade guides:

- **Linux/Bare Metal**: https://docs.min.io/enterprise/aistor-object-store/upgrade-aistor-server/upgrade-aistor-linux/
- **Kubernetes with Helm**: https://docs.min.io/enterprise/aistor-object-store/upgrade-aistor-server/upgrade-aistor-kubernetes-helm/

### New Configuration Options

- Inventory retention can now be configured per bucket in addition to the global
  default (#5699).

### Support

For enterprise support:

- SUBNET Support: https://subnet.min.io
- Documentation: https://docs.min.io
